3.1.4.19 ElfrOldestRecord (Opnum 5)

  • Article

The ElfrOldestRecord (Opnum 5) method instructs the server to report the record number of the oldest record in the event log.

 NTSTATUS ElfrOldestRecord(
   [in] IELF_HANDLE LogHandle,
   [out] unsigned long* OldestRecordNumber
 );

LogHandle: Handle to an event log. This parameter is a server context handle, as specified in section 2.2.6.

OldestRecordNumber: The number of the oldest record in the specified event log. The chronology is based on the time that records are written (not the record generation time specified by the event source).

Return Values: The method MUST return STATUS_SUCCESS (0x00000000) on success; otherwise, it MUST return an implementation-based, nonzero NTSTATUS value specified in [MS-ERREF].

In response to this request from the client, the server MUST first check that the handle is valid. The server MUST fail the operation with the error STATUS_INVALID_HANDLE (0xC0000008) if the handle is invalid.

If the handle is valid, the method MUST retrieve the record number of the oldest record in the associated log and return the number via the OldestRecordNumber parameter, and return success. If the log is empty, the server MUST set the OldestRecordNumber parameter to 0.<38> This call MUST NOT update the internal state of the server.